Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/SeQIsf8y4rM6SLnHEieZl7iI5JA.roa
File: SeQIsf8y4rM6SLnHEieZl7iI5JA.roa (raw, json)
Hash identifier: Hjed1iaCf/keiNNSTzupabpiBQr/FVC6rfte8EU8NxA=
Subject key identifier: 49:E4:08:B1:FF:32:E2:B3:3A:48:B9:C7:12:27:99:97:B8:88:E4:90
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4445
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SeQIsf8y4rM6SLnHEieZl7iI5JA.roa
Signing time: Mon 07 Mar 2022 00:30:10 +0000
ROA not before: Mon 07 Mar 2022 00:30:10 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17477 (0x4445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 7 00:30:10 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=49E408B1FF32E2B33A48B9C712279997B888E490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:d9:d9:2b:da:33:42:9e:75:d4:c9:cb:59:
60:4e:2a:82:3d:ee:8e:61:da:ec:ee:4a:b6:dc:d8:
cd:b5:fb:ef:c5:8c:ae:58:d2:a1:1b:2e:7f:15:4e:
7f:c6:6d:5f:8a:3d:ad:6a:43:88:bf:41:9a:f7:ff:
4c:2d:c9:be:eb:e9:5f:82:b6:b1:d6:76:4e:a6:98:
b3:19:99:45:fb:a4:dd:42:d7:7e:1f:cf:f3:91:2f:
0c:62:c4:cd:b0:27:a2:1f:f4:ef:ce:ae:7c:5a:45:
e1:5f:57:5d:b4:c6:ce:85:63:0f:96:5c:1d:89:a7:
ba:0e:43:4b:6b:49:01:76:b0:ef:fa:9d:d7:e6:f4:
48:1a:3c:0f:f6:64:9d:c2:78:7f:46:39:b3:34:30:
50:49:f1:64:45:a3:b5:32:10:f3:54:a9:02:f3:75:
b4:a1:09:d8:68:eb:25:3a:b5:24:77:3b:3c:b7:ac:
02:ac:16:c8:cd:15:f3:d4:e0:64:9a:23:24:97:d5:
88:6f:34:b9:e0:c9:9a:47:87:d2:e1:05:90:66:91:
08:04:2f:74:0a:00:94:b0:ed:a6:ce:ec:fd:ca:49:
5a:fd:f2:b2:31:30:37:3e:32:83:71:20:5f:64:05:
e6:d6:22:7a:f8:ec:55:67:30:c7:53:69:c6:2c:c3:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:08:B1:FF:32:E2:B3:3A:48:B9:C7:12:27:99:97:B8:88:E4:90
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SeQIsf8y4rM6SLnHEieZl7iI5JA.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:52:30:c7:bc:8d:ef:3a:88:6a:fb:ca:20:31:24:3c:2c:8e:
4c:53:9e:d3:1e:15:5d:0a:55:3e:0e:bd:6d:e3:b3:c3:67:28:
41:a3:90:c6:3d:35:ac:da:98:83:b7:e1:43:89:f3:09:be:a8:
3a:6d:6c:cf:84:a6:e8:fd:1d:77:74:25:3d:38:2d:9a:59:7f:
fb:c0:fd:72:2b:85:d1:97:be:fe:3f:57:fa:2f:0a:10:7a:1c:
97:b4:e2:c3:ce:f6:a9:53:be:25:0d:5a:a7:60:0d:94:8d:1e:
ff:db:88:4e:fb:4e:6d:01:19:b2:3d:b1:81:28:a2:db:b5:57:
a4:6b:48:8a:10:2c:a1:d7:cb:0f:5e:54:4b:a0:db:fe:59:44:
91:bd:3e:8c:55:b1:a7:26:6d:18:b8:99:59:2f:c1:e5:5d:a4:
fb:43:a8:b6:ad:42:dc:07:48:ce:94:2b:7e:1a:f7:87:82:43:
03:59:9a:da:ab:6e:02:a5:95:67:dc:b5:66:29:8d:2a:c9:3a:
1e:fa:37:73:7f:a8:07:85:cc:b3:53:85:11:a1:f1:6c:d8:ec:
d3:64:3f:4e:0e:35:70:f1:1e:55:45:b0:7b:dc:ca:6d:89:11:
59:03:41:21:e1:25:c7:a0:1e:3a:35:da:59:78:6b:7e:02:57:
c2:6b:94:ad
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICREUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMDcw
MDMwMTBaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDQ5RTQwOEIxRkYzMkUy
QjMzQTQ4QjlDNzEyMjc5OTk3Qjg4OEU0OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDfNnZK9ozQp511MnLWWBOKoI97o5h2uzuSrbc2M21++/FjK5Y
0qEbLn8VTn/GbV+KPa1qQ4i/QZr3/0wtyb7r6V+CtrHWdk6mmLMZmUX7pN1C134f
z/ORLwxixM2wJ6If9O/OrnxaReFfV120xs6FYw+WXB2Jp7oOQ0trSQF2sO/6ndfm
9EgaPA/2ZJ3CeH9GObM0MFBJ8WRFo7UyEPNUqQLzdbShCdho6yU6tSR3Ozy3rAKs
FsjNFfPU4GSaIySX1YhvNLngyZpHh9LhBZBmkQgEL3QKAJSw7abO7P3KSVr98rIx
MDc+MoNxIF9kBebWInr47FVnMMdTacYswyupAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUSeQIsf8y4rM6SLnHEieZl7iI5JAwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9TZVFJc2Y4eTRyTTZTTG5IRWllWmw3aUk1SkEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AJpSMMe8je86iGr7yiAxJDwsjkxTntMeFV0KVT4OvW3js8NnKEGjkMY9NazamIO3
4UOJ8wm+qDptbM+Epuj9HXd0JT04LZpZf/vA/XIrhdGXvv4/V/ovChB6HJe04sPO
9qlTviUNWqdgDZSNHv/biE77Tm0BGbI9sYEootu1V6RrSIoQLKHXyw9eVEug2/5Z
RJG9PoxVsacmbRi4mVkvweVdpPtDqLatQtwHSM6UK34a94eCQwNZmtqrbgKllWfc
tWYpjSrJOh76N3N/qAeFzLNThRGh8WzY7NNkP04ONXDxHlVFsHvcym2JEVkDQSHh
JcegHjo12ll4a34CV8JrlK0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org